Approved changes feed: RSS · Atom

cpe:2.3:a:dell:grab:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductGrab (fdad59be-b9da-51ae-a8e8-0d55ceb07d2f)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25958 vulnerable 2026-06-08 06:31:24.158110 Details available
MEDIUM (6.7)
Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of application data and service disruption.
Published: 2024-03-26T15:18:52.198Z
Updated: 2024-08-02T15:54:56.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25957 vulnerable 2026-06-08 06:31:24.156677 Details available
MEDIUM (4.8)
Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.
Published: 2024-03-26T15:26:26.090Z
Updated: 2024-08-02T19:56:11.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25956 vulnerable 2026-06-08 06:31:24.155432 Details available
MEDIUM (5.5)
Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system information.
Published: 2024-03-26T15:31:02.386Z
Updated: 2024-08-02T16:20:38.599Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.